OpenVPN: A Well-Known VPN Solution

OpenVPN is a very popular choice for VPN solutions. It is available for all major Linux distributions, Android, Windows, and macOS. It is relatively simple to use, and there are many community tutorials available on how to install configure it.

This guide, however, takes a different approach. The provided script generates certificates, keys, and ready-to-use configurations for both servers and clients.

Highlights

• Uses ECDSA for private keys, which is faster than RSA.
• Supports CHACHA20 for CPUs without AES instructions or AES256 if AES instructions are available.
• Generates configurations confirmed to work with OpenVPN 2.6.15.

Generating Certificates and Final Configuration

Executing the attached script from GitHub openvpn-mtls.sh will create a directory containing all certificates and the final OpenVPN configuration. Below is an example of a generated client configuration:

git clone https://github.com/rrafal1337/bash.git
./openvpn-mtls.sh

Output from script:

Certificate request self-signature ok
subject=CN=server1
Certificate request self-signature ok
subject=CN=server2
Certificate request self-signature ok
subject=CN=server3
Certificate request self-signature ok
subject=CN=client1
Certificate request self-signature ok
subject=CN=client2
Certificate request self-signature ok
subject=CN=client3
Certificate request self-signature ok
subject=CN=client4
Certificate request self-signature ok
subject=CN=client5
Certificate request self-signature ok
subject=CN=client6
Certificate request self-signature ok
subject=CN=client7
Certificate request self-signature ok
subject=CN=client8
Certificate request self-signature ok
subject=CN=client9
Certificate request self-signature ok
subject=CN=client10

How to Use

1. Run the script to generate the required certificates and configurations.
2. Distribute the generated .ovpn files to the respective clients and servers.
3. Use tools like Ansible, Bash, or manual methods to deploy the configurations.

This approach saves significant time and ensures consistency across configurations.